Malware Botnet C&C

You are currently viewing the database entry for the malware botnet command&control server (C&C) hosted at 209.20.87.138 . You can get additional information about this C&C here, such as first seen, last seen and associated malware samples.

Database Entry

IP address:	209.20.87.138
Hostname:	209-20-87-138.slicehost.net
AS number:	AS19994
AS name:	RACKSPACE
Country:	US
First seen:	2021-02-17 15:50:49 UTC
Last online:	2021-09-08 08:xx:xx UTC

Botnet C&Cs

The table below shows all botnet C&Cs know to Feodo Tracker that are hosted on this host.

Referencing Malware Samples

The following table shows the most recent malware samples associated with malware botnet C&Cs hosted on 209.20.87.138. Please consider that the output is limited to the 500 most recent malware samples.

Time stamp (UTC)	MD5 hash	File Type	Virustotal	Malware
2021-04-05 06:10:35	6d30b0883ffaed58046a131139b0ab0d	dll	n/a	Dridex
2021-04-05 05:43:33	a2e8fa0b021d6dc9a43ceaed7990cf46	dll	n/a	Dridex
2021-04-05 05:04:34	dee6a7a5ef3044bed7aced10d2dec0d3	dll	n/a	Dridex
2021-04-05 04:53:32	9f45ca6529426b0e47232816139c5403	dll	n/a	Dridex
2021-04-05 03:37:29	af155eff808cf127c62b64c8a13ecbae	dll	n/a	Dridex
2021-04-05 03:23:30	4b1d17defa1eecb27c3d0e667189ce8b	dll	n/a	Dridex
2021-02-22 21:14:20	96742248dffde3137394486039b88322	exe	81.69%	n/a
2021-02-22 21:09:32	993e866232ef202cd7e9fcc8a141234b	dll	n/a	Dridex
2021-02-22 21:03:56	52660ebd18d7e9c8a8b3a53ea9a0604c	dll	n/a	Dridex
2021-02-22 20:54:53	83469aa72049b319ea34145808b17d23	dll	n/a	Dridex
2021-02-18 11:56:10	b23c2e9a3109113726d429c974e58d53	dll	42.86%	Dridex
2021-02-18 09:02:52	a1773bcb1d4e0d2e6a3531e989e21fc4	dll	n/a	n/a
2021-02-18 09:02:18	fdb4c2455d1331b2dfabc9289a812295	dll	n/a	Dridex
2021-02-18 09:00:45	adae957f96ecb08a9271bcbe38da2cc5	dll	n/a	Dridex
2021-02-18 09:00:32	4ee129a17d4714d96f9a56e5f5aeb49f	dll	n/a	Dridex
2021-02-18 09:00:24	5cb98dc4e31e1e09b9ecf06a5fbc75f2	dll	n/a	Dridex
2021-02-18 08:56:49	aeb89feabdc2f252f10b17e843b97e22	dll	n/a	Dridex
2021-02-18 08:56:49	24499a2accccfce4f2fa27621c832167	dll	n/a	Dridex
2021-02-18 08:56:31	7b06c3c759dca98845688da6a0feada1	dll	7.25%	n/a
2021-02-18 08:50:33	29517d23a58b39ee49f9b966eeb114a2	dll	n/a	Dridex
2021-02-18 04:01:14	be536247ecfde74a90f9f41ed376736d	dll	n/a	Dridex
2021-02-18 04:00:25	8040027d3b0d5643837366b46e114e47	dll	n/a	Dridex
2021-02-18 03:59:55	0754d61449d4f3fcfb69b0689b3e86bb	dll	n/a	Dridex
2021-02-17 19:26:09	a1f4078589c2b67b659538fa40653e15	dll	15.94%	n/a
2021-02-17 19:26:06	5ef643c06d606faf37ca3b390ce33640	dll	n/a	Dridex
2021-02-17 19:26:04	986c42e6c33302d9c09029fb01cf1b6e	dll	17.39%	Dridex
2021-02-17 19:25:53	6026c4c805e1e4e64391cdefd6dca3c9	dll	n/a	Dridex
2021-02-17 19:25:51	675d08a00fe7631cc6db9c9a51bb04cc	dll	n/a	n/a
2021-02-17 16:39:26	ce416e5df0cff11d5bc7a8c7956b5f80	dll	15.94%	Dridex
2021-02-17 16:36:50	c41cf929493bdd0b86c0aaffc7d9c583	dll	n/a	Dridex
2021-02-17 16:36:33	94a348d5172ca8a658fef7809af40b72	dll	14.49%	Dridex
2021-02-17 16:36:33	2ad88b77551488cce9e7b33a6f6af6bc	dll	n/a	Dridex
2021-02-17 16:32:39	fe8f4b38ff583c42c615696097e1c196	dll	n/a	n/a
2021-02-17 16:32:39	a4fac616a87e9b6a069d06bfc41e8dce	dll	n/a	Dridex
2021-02-17 16:32:39	4f2a2098a3f8ce01df8d3deac6acb19f	dll	n/a	Dridex
2021-02-17 16:32:25	1cfba0904f4423463f764a11a6fd4251	dll	n/a	Dridex
2021-02-17 15:33:43	c98532eda83e7b04cdbaad0f586525a8	dll	n/a	Dridex
2021-02-17 15:33:31	a6f5f2b9fc72e1abeffb740af8e31451	dll	n/a	Dridex
2021-02-17 15:33:31	44f806013f9cefc33f2e45d4fc7602b2	dll	n/a	Dridex
2021-02-17 15:33:31	299528498532d6c0d73c0f555493bfb8	dll	n/a	Dridex
2021-02-17 15:33:23	cfd36ec3f5324465e25cb27141720504	dll	n/a	Dridex
2021-02-17 15:33:23	079cce6657c100aa3af7952631700678	dll	n/a	Dridex
2021-02-17 15:17:18	6cc89694cf80c81272f0f01f9290f819	dll	14.49%	Dridex
2021-02-16 23:19:44	a9d461af54b2fd6f6bb2b6a8f440a808	exe	85.92%	n/a